Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          63YgBFB+K2+U6S0lbRRkRzbmZNiyQd0v+PO8gbugWFo=
Subject key identifier:   2A:D8:71:CC:85:88:39:D2:57:3D:9F:80:F0:58:DB:EC:BA:18:08:0C
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          E4
Signing time:             Mon 11 May 2026 06:38:41 +0000
Manifest this update:     Mon 11 May 2026 06:38:40 +0000
Manifest next update:     Mon 18 May 2026 06:38:40 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: FQ3bIYUWXvI+7lbeJgn4grD37ROamf1EDZ2z+XKHsws=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: May 11 06:38:40 2026 GMT
            Not After : May 18 06:38:40 2026 GMT
        Subject: CN=6a017971-1375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:53:21:a0:1d:c6:6e:14:45:56:4a:42:0a:
                    02:a8:f6:64:65:ae:14:04:0d:ec:68:67:b2:e4:09:
                    5c:ac:95:1f:65:78:64:0f:f6:ef:ec:dd:10:12:21:
                    19:15:35:29:5d:1b:c1:70:ab:88:23:27:79:5f:7c:
                    b8:a5:b4:6b:2b:d6:21:29:c0:20:ed:3e:2f:8c:91:
                    14:c5:30:e4:60:46:a8:2b:12:b0:b2:4d:5f:1d:7e:
                    46:46:10:d4:1e:b4:75:a3:ff:e6:22:fb:54:70:83:
                    c1:a3:3d:5a:f8:54:c5:1a:69:20:2b:81:e1:cb:ac:
                    11:98:4f:3f:0e:ab:2e:2a:02:2a:df:fb:38:09:e0:
                    f3:54:d9:49:34:9c:65:01:89:10:bc:91:b1:fc:85:
                    59:2b:73:31:66:55:3d:23:b6:c5:3c:14:4a:0b:5e:
                    c8:b5:78:1c:7a:7d:23:17:2e:30:c9:ee:eb:2a:05:
                    fe:dc:e6:ea:91:d6:c8:e3:f6:8c:33:b3:12:2e:04:
                    bc:91:0d:be:b4:fb:eb:4e:e9:7a:ae:e4:e7:14:2e:
                    a2:ed:43:7e:e5:50:09:6f:e5:48:d3:60:0d:ea:fd:
                    da:56:55:d4:e8:b6:35:01:5e:92:c6:b2:04:db:45:
                    9c:b8:b6:be:4e:45:97:a4:09:6e:a6:4c:67:ca:98:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:71:CC:85:88:39:D2:57:3D:9F:80:F0:58:DB:EC:BA:18:08:0C
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:a8:86:5a:6c:49:54:c4:24:a3:65:ac:82:36:e5:8e:3c:
         8c:fb:92:a9:ec:aa:49:8d:ed:1a:f7:3e:25:bc:f5:8e:6b:0e:
         7c:2a:a2:7b:0f:8d:59:42:7d:1d:07:a6:fb:a3:d7:ea:f2:d2:
         e9:04:86:47:63:0c:6a:92:67:2e:1b:7f:19:32:57:43:4d:76:
         bf:ee:75:84:3e:f6:b9:30:bb:ab:dc:fd:ed:92:18:3e:fa:6f:
         d7:b4:84:86:fc:94:25:98:87:8f:38:cd:0b:b3:c2:67:26:89:
         58:21:c1:49:c6:42:00:09:8f:7a:95:26:7b:84:4c:7c:39:19:
         16:8d:93:0f:a5:e1:58:8a:7d:86:4f:d4:d3:af:ee:f7:72:2a:
         2a:29:a8:25:2d:8f:46:06:f9:1f:c7:54:00:d6:86:cd:bd:ac:
         0a:50:b8:d9:df:e2:c9:69:22:2d:14:e1:e9:bc:96:41:f1:38:
         0f:ac:18:c5:93:e7:59:1a:64:72:1b:68:21:0d:11:ed:75:e5:
         50:38:d0:9f:38:a5:fc:d3:ac:ac:c2:82:c5:4b:8f:af:c1:17:
         6a:32:06:61:61:79:2d:e1:02:ca:e0:55:96:3f:c6:17:e3:3f:
         c0:a8:d9:be:69:e4:e0:5b:fc:ea:42:e8:e8:f7:a6:f1:95:33:
         19:6c:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:55 2026 by rpki-client